Guide

UK Document Retention Periods: The Complete Guide by Document Type

Getting document retention right is fundamental to document management GDPR compliance. Keep records too long and you're breaching GDPR. Destroy them too early and you're breaching your legal obligations. This guide gives you the retention periods for common UK business document types.

Important note

Retention requirements change. This guide reflects current guidance but always verify against current HMRC, ICO, and sector regulator guidance for your specific circumstances. When in doubt, seek legal advice.

Financial and Tax Records

Document TypeRetention PeriodAuthority
VAT records6 yearsHMRC
Company accounting records6 years (private) / 3 years (public)Companies Act 2006
Self-assessment tax returns5 years after 31 Jan submission deadlineHMRC
PAYE records3 years after end of tax yearHMRC
P60s and P11Ds3 years after end of tax yearHMRC
Payroll records (employer)6 yearsHMRC / Employment law
Purchase invoices6 yearsHMRC
Bank statements6 yearsHMRC
Capital allowance recordsLife of asset + 6 yearsHMRC

Employment Records

Document TypeRetention PeriodNotes
Personnel files6 years after employment endsLimitation Act 1980
Recruitment records (unsuccessful)6 months–1 yearDiscrimination claim risk period
Training recordsDuration + 6 yearsLonger if health & safety related
Disciplinary records6 years after employment endsEmployment tribunal limitation period
Right to work checksDuration + 2 yearsHome Office requirement
DBS check records6 months (result only, not detail)DBS Code of Practice

Legal and Contracts

Document TypeRetention PeriodNotes
Simple contracts6 years after expiryLimitation Act 1980
Deeds12 years after expiryLimitation Act 1980
Insurance policiesDuration + 3 years minimumLonger for EL policies (40 years)
Employer's liability insurance40 yearsMesothelioma/asbestos claim risk
Minutes of board meetingsPermanent (Companies Act)Required for life of company

Health and Safety

Document TypeRetention Period
Accident book / RIDDOR reports3 years from date of entry
H&S training recordsDuration of employment + 6 years
Risk assessmentsWhile current + 5 years after superseded
Asbestos recordsLife of building / 40 years minimum
COSHH records40 years (if hazardous exposure)

Healthcare Records

Record TypeRetention Period
Adult patient records (NHS)8 years after last treatment
Children's recordsUntil 25th birthday (26th if treatment ended at 17)
Maternity records25 years
Mental health records20 years after last contact

How to Implement Retention in Your DMS

A document management system with retention labels automates all of the above. You assign a retention label to each document type when scanning — the label contains the retention period. The DMS automatically flags documents for review when they expire and can be configured to auto-delete or archive. This eliminates the risk of over-retention (GDPR breach) or premature deletion (legal obligation breach) without any manual calendar management.

Automate retention in your DMS

Compare DMS platforms with built-in UK retention management.

Compare DMS Systems →GDPR Compliance Guide →